Suji Yan, founder of the Web3 browser extension Mask, has suffered a major security breach, losing $4 million in cryptocurrencies.
The attack, which targeted a public wallet on his phone, took place within an 11-minute window while Yan was away from his device. The stolen funds, including ETH, USDT, WETH, and MASK, were quickly moved to multiple addresses, converted to Ethereum, and redistributed.
Yan, who was celebrating his birthday at the time, suspects a possible private key leak but has not ruled out an offline attack. He has enlisted security experts from SlowMist and ZachXBT to track the stolen assets and is working with law enforcement to investigate the breach.
Unlike recent high-profile hacks, such as the Bybit incident, Yan believes this was not caused by malicious code but rather a breach of trust.
As the crypto community grapples with a series of security breaches, market confidence remains shaken, with Bitcoin’s price struggling to regain momentum. This breach highlights ongoing vulnerabilities within the crypto space, raising concerns about the security of private wallets and the trust placed in personal devices.
Many in the industry are calling for stronger security protocols and more vigilance as cyberattacks on high-profile figures and firms continue to rise.
Binance has issued a strong warning to cryptocurrency users, highlighting the growing threat of phishing scams and fraudulent schemes aimed at stealing digital assets.
Aleksei Andriunin, the founder of the cryptocurrency firm Gotbit, was recently transferred to the U.S. from Portugal after being arrested in October 2024.
Cybercriminals are increasingly targeting GitHub users by creating deceptive repositories to spread malware, particularly designed to steal sensitive information like cryptocurrency details and personal credentials. A
Infini, a stablecoin payment firm, lost $50 million in what appears to be an inside job.